In the Claims: 



Please amend claims 1, 22 and 43, and please cancel claims 2, 23 and 44, as 
indicted below. 

1. (Currently amended) A computer-implemented method for the secure 
exchange of objects in a distributed computing environment, comprising: 

a user accessing a client device; 

generating a computer programming language object from a data representation 
language representation of the object, wherein the object is an instance of 
a class in the computer programming language, and wherein the object is 
accessible for use during said accessing the client device; 

the client device receiving a message in the data representation langu age from a 
service device in the distributed computing environment prior to said 
generating a computer programming language object, wherein the 
message includes the data representation language representation of the 
object; 

the user terminating said accessing the client device; and 

deleting the computer programming language object in response to said 
terminating access, wherein the deleted object is not accessible for use by 
subsequent users of the client device. 

2. (Canceled) 

3. (Original) The method as recited in claim 1, wherein said accessing a client 
device comprises the user coupling an identification device to the client device, wherein 
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the identification device provides identification information of the user to the client 
device, and wherein said terminating said accessing comprises decoupling the 
identification device from the client device. 

4. (Original) The method as recited in claim 3, wherein the identification device 
is a smart card. 

5. (Original) The method as recited in claim 1, wherein said accessing a client 
device comprises the user logging on to the client device by providing user identification 
to the client device, and wherein said terminating said accessing comprises the user 
logging off the client device. 

6. (Original) The method as recited in claim 1, wherein said generating a 
computer programming language object from a data representation language 
representation of the object is performed by a virtual machine executing within the client 
device. 

7. (Original) The method as recited in claim 1, further comprising: 

generating a plurality of computer programming language objects from data 
representation language representations of the objects; and 

deleting the plurality of computer programming language objects in response to 
said terminating access. 

8. (Original) The method as recited in claim 1, wherein said data representation 
language is extensible Markup Language (XML). 

9. (Original) The method as recited in claim 1, wherein said computer 
programming language is the Java programming language. 
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10. (Previously presented) A computer-implemented method for the secure 
exchange of objects in a distributed computing environment, comprising: 

a user accessing a client device; 

the client device receiving a message in a data representation language from a 
service device in the distributed computing environment, wherein the 
message includes a data representation language representation of a 
computer programming language object; 

determining if the user has access rights to the computer programming language 
object; 

if said determining determines the user has access rights to the computer 
programming language object, generating the object from the data 
representation language representation of the object, wherein the object is 
an instance of a class in the computer programming language, and wherein 
the object is accessible for use during said accessing the client device; and 

if said determining determines the user does not have access rights to the 
computer programming language object, not generating the object. 

11. (Original) The method as recited in claim 10, wherein the message further 
includes access information for the computer programming language object, wherein said 
determining if the user has access rights to the computer programming language object 
uses the access information. 

12. (Original) The method as recited in claim 10, further comprising: 
the user terminating said accessing the client device; and 
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deleting the computer programming language object in response to said 
terminating access, wherein the deleted object is not accessible for use by 
subsequent users of the client device. 

13. (Original) The method as recited in claim 12, wherein said accessing a client 
device comprises the user coupling an identification device to the client device, wherein 
the identification device provides identification information of the user to the client 
device, and wherein said terminating said accessing comprises decoupling the 
identification device from the client device. 

14. (Original) The method as recited in claim 13, wherein the identification 
device is a smart card. 

15. (Original) The method as recited in claim 12, wherein said accessing a client 
device comprises the user logging on to the client device by providing user identification 
to the client device, and wherein said terminating said accessing comprises the user 
logging off the client device. 

16. (Original) The method as recited in claim 10, further comprising: 
the user terminating said accessing the client device; and 

storing the computer programming language object in response to said 
terminating access. 

17. (Original) The method as recited in claim 16, further comprising: 

the user accessing the client device subsequent to said storing the object; and 
accessing the stored object during said accessing the client device. 
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18. (Original) The method as recited in claim 17,. further comprising storing 
access rights information of the user with the object, wherein said accessing the stored 
object comprises verifying the access rights of the user with the stored access rights 
information. 

19. (Original) The method as recited in claim 10, wherein said generating a 
computer programming language object from a data representation language 
representation of the object is performed by a virtual machine executing within the client 
device. 

20. (Original) The method as recited in claim 10, wherein said data 
representation language is extensible Markup Language (XML). 

21. (Original) The method as recited in claim 10, wherein said computer 
programming language is the Java programming language. 

22. (Currently amended) A device configured to: 
accept user input to initiate user access of the device; 

generate a computer programming language object from a data representation 
language representation of the object, wherein the object is an instance of 
a class in the computer programming language, and wherein the object is 
accessible for use during said accessing the device; 

receive a message in the data representation language from a source prior to said 
generating a computer programming language object, wherein the 
message includes the data representation language representati on of the 
object; 

terminate said user access; and 
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delete the computer programming language object in response to said terminating 
access; 

wherein the deleted object is not accessible for use by subsequent users of the 
device. 

23. (Canceled) 

24. (Original) The device as recited in claim 22, wherein the device is further 
configured to: 

couple to an identification device, wherein the identification device is configured 
to provide identification information of the user to the device during said 
accepting user input; and 

decouple from the identification device subsequent to said generating, wherein the 
device performs said terminating said user access in response to said 
decoupling. 

25. (Original) The device as recited in claim 24, wherein the identification device 
is a smart card. 

26. (Original) The device as recited in claim 22, wherein the device is further 
configured to accept user input to initiate said terminating said user access. 

27. (Original) The device as recited in claim 22, wherein the device is further 
configured to: 

generate a plurality of computer programming language objects from data 
representation language representations of the objects; and 
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delete the plurality of computer programming language objects in response to said 
terminating access. 

28. (Original) The device as recited in claim 22, comprising: 
a processor; 

a memory; 

a virtual machine executed by said processor from said memory, wherein said 
generating is performed by the virtual machine. 

29. (Original) The device as recited in claim 28, 

wherein said accepting, said terminating, and said deleting are performed by the 
virtual machine, wherein the object is stored in the memory subsequent to 
said generating, and wherein, in said deleting, the object is deleted from 
the memory. 

•30. (Original) The device as recited in claim 22, wherein said data representation 
language is extensible Markup Language (XML). 

31. (Original) The device as recited in claim 22, wherein said computer 
programming language is the Java programming language. 

32. (Previously presented) A distributed computing system, comprising: 
a client device; and 

a service device; 
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wherein the client device is configured to: 

accept user input to initiate user access of the device; 

receive a message in a data representation language from the service 
device, wherein the message includes a data representation 
language representation of a computer programming language 
object; 

determine if the user has access rights to the computer programming 
language object; 

if said determining determines the user has access rights to the computer 
programming language object, generate the object from the data 
representation language representation of the object, wherein the 
object is an instance of a class in the computer programming 
language, and wherein the object is accessible for use during said 
accessing the client device; and 

if said determining determines the user does not have access rights to the 
computer programming language object, not generate the object. 

33. (Original) The system as recited in claim 32, wherein the message further 
includes access information for the computer programming language object, wherein said 
determining if the user has access rights to the computer programming language object 
uses the access information. 

34. (Original) The system as recited in claim 32, wherein the client device is 
further configured to: 
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accept user input to terminate said access of the client device; and 

delete the computer programming language object in response to said terminating 
said access, wherein the deleted object is not accessible for use by 
subsequent users of the client device. 

35. (Original) The system as recited in claim 34, wherein the client device is 
further configured to: 

couple to an identification device, wherein the identification device is configured 
to provide identification information of the user to the client device during 
said accepting user input; and 

decouple from the identification device subsequent to said generating, wherein the 
device performs said terminating said user access in response to said 
decoupling. 

36. (Original) The system as recited in claim 35, wherein the identification 
device is a smart card. 

37. (Original) The system as recited in claim 32, 
wherein the client device comprises: 

a memory; and 
wherein the client device is further configured to: 

. accept user input to terminate said access of the client device; and 
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store the computer programming language object to the memory in 
response to said terminating access. 

38. (Original) The system as recited in claim 37, wherein the client device is 
further configured to : 

accept user input to initiate a second user access of the client device subsequent to 
said storing the object; and 

provide access to the stored object during said second user access of the client 
device. 

39. (Original) The system as recited in claim 38, wherein the client device is 
further configured to: 

store access rights information of the user with the object in the memory; and 

verify the access rights of the user with the stored access rights information prior 
to said providing access to the stored object. 

40. (Previously presented) The device as recited in claim 32, comprising: 
a processor; 

a memory; 

a virtual machine executed by said processor from said memory, wherein said 
generating is performed by the virtual machine, and wherein the object is 
stored in the memory subsequent to said generating. 
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41. (Original) The system as recited in claim 32, wherein said data representation 
language is extensible Markup Language (XML). 

42. (Original) The system as recited in claim 32, wherein said computer 
programming language is the Java programming language. 

43. (Currently amended) A tangible, computer accessible medium comprising 
program instructions, wherein the program instructions are computer-executable to 
implement: 

a user accessing a client device; 

generating a computer programming language object from a data representation 
language representation of the object, wherein the object is an instance of 
a class in the computer programming language, and wherein the object is 
accessible for use during said accessing the client device; 

receiving a message in the data representation language from a service device in 
the distributed computing environment prior to said generating a computer 
programming language object, wherein the message includes the data 
representation language representation of the object; 

the user terminating said accessing the client device; and 

deleting the computer programming language object in response to said 
terminating access, wherein the deleted object is not accessible for use by 
subsequent users of the client device. 

44. (Canceled) 
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45. (Previously presented) The tangible, computer accessible medium as recited 
in claim 43 , wherein the program instructions are further computer-executable to 
implement: 

generating a plurality of computer programming language objects from data 
representation language representations of the objects; and 

deleting the plurality of computer programming language objects in response to 
said terminating access. 

46. (Previously presented) The tangible, computer accessible medium as recited 
in claim 43, wherein said data representation language is extensible Markup Language 
(XML), and wherein said computer programming language is the Java programming 
language. 

47. (Previously presented) A tangible, computer accessible medium comprising 
program instructions, wherein the program instructions are computer-executable to 
implement: 

a user accessing a client device; 

the client device receiving a message in a data representation language from a 
service device in the distributed computing environment, wherein the 
message includes a data representation language representation of a 
computer programming language object; 

determining if the user has access rights to the computer programming language 
object; 

if said determining determines the user has access rights to the computer 
programming language object, generating the object from the data 
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representation language representation of the object, wherein the object is 
an instance of a class in the computer programming language, and wherein 
the object is accessible for use during said accessing the client device; and 

if said determining determines the user does not have access rights to the 
computer programming language object, not generating the object. 

48. (Previously presented) The tangible, computer accessible medium as recited 
in claim 47, wherein the message further includes access information for the computer 
programming language object, wherein said determining if the user has access rights to 
the computer programming language object uses the access information. 

49. (Previously presented) The tangible, computer accessible medium as recited 
in claim 47, wherein the program instructions are further computer-executable to 
implement: 

the user terminating said accessing the client device; and 

deleting the computer programming language object in response to said 
terminating access, wherein the deleted object is not accessible for use by 
subsequent users of the client device. 

50. (Previously presented) The tangible, computer accessible medium as recited 
in claim 49, wherein said accessing a client device comprises the user coupling an 
identification device to the client device, wherein the identification device provides 
identification information of the user to the client device, and wherein said terminating 
said accessing comprises decoupling the identification device from the client device. 

51. (Previously presented) The tangible, computer accessible medium as recited 
in claim 47, wherein the program instructions are further computer-executable to 
implement: 
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terminating said accessing the client device; and 

storing the computer programming language object in response to said 
terminating access; and 

storing access rights information of the user with the object. 

52. (Previously presented) The tangible, computer accessible medium as recited 
in claim 51, wherein the program instructions are further computer-executable to 
implement: 

the user accessing the client device subsequent to said storing the object; 

verifying the access rights of the user with the stored access rights information; 
and 

if said verifying verifies the access rights of the user to the object, allowing access 
to the stored object during said accessing the client device. 

53. (Previously presented) The tangible, computer accessible medium as recited 
in claim 47, wherein said data representation language is extensible Markup Language 
(XML), and wherein said computer programming language is the Java programming 
language. 
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